4d9f9ef316b9b61a2132f428080dcb68 | Triage

Sharing

General

Target

4d9f9ef316b9b61a2132f428080dcb68
Size

25KB
MD5

4d9f9ef316b9b61a2132f428080dcb68
SHA1

d93cf7de05a95cc4884ade60631aad08c904b208
SHA256

8d1c5fbf5228ddf65801992b3f5b7c255a0d82572dde0dde8a1d38a7dc46888a
SHA512

259b7951fe283b86b9e4c4cd6e123fcec73e527c4f47e73e1ed9b72c07c9ce8213215bf292d0f4d5df53d7ad3d2b3b9d1b8a1335fa70611eb41d582f4320c84a
SSDEEP

768:bOzI2uclgHFu8YINOsU28b7ex56K5558ucN:sVu9xbEVXokkcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d9f9ef316b9b61a2132f428080dcb68

Files

4d9f9ef316b9b61a2132f428080dcb68
.exe windows:4 windows x86 arch:x86

6045adf5c252c84a3d5cb2b852babdcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
Sleep
DeleteFileA
GetTempPathA
GetProcAddress
GetModuleHandleA
GetLastError
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
GetTickCount
GetTempFileNameA

advapi32

OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
DeleteService
OpenSCManagerA

msvcrt

_stricmp
srand
rand
strlen
fclose
fwrite
fopen
_strlwr
memset
_snprintf
sprintf
strrchr
strcat
strcpy

shlwapi

SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 16B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ